Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS42216.roa
File: AS42216.roa (raw, json)
Hash identifier: n9svsRCnkYGcf5ueVsevPD557VLOWTQVfbJ3AZcVZoY=
Subject key identifier: 58:39:A0:D6:D8:89:EA:37:82:47:1F:4F:B1:91:88:90:93:FC:BC:2B
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 224FD11A94FC080CD7F9DB66645CAF6B210EC31D
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS42216.roa
Signing time: Tue 22 Apr 2025 08:00:29 +0000
ROA not before: Tue 22 Apr 2025 07:55:29 +0000
ROA not after: Tue 21 Apr 2026 08:00:29 +0000
asID: 42216
IP address blocks: 37.221.76.0/24 maxlen: 24
62.182.32.0/24 maxlen: 24
62.182.33.0/24 maxlen: 24
62.182.34.0/24 maxlen: 24
62.182.35.0/24 maxlen: 24
212.115.100.0/24 maxlen: 24
212.115.101.0/24 maxlen: 24
212.115.102.0/24 maxlen: 24
212.115.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 16:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:4f:d1:1a:94:fc:08:0c:d7:f9:db:66:64:5c:af:6b:21:0e:c3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Apr 22 07:55:29 2025 GMT
Not After : Apr 21 08:00:29 2026 GMT
Subject: CN=5839A0D6D889EA3782471F4FB191889093FCBC2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:48:0f:16:0a:fc:a5:dc:9e:64:b5:4b:b3:
8a:cf:10:cf:75:ec:42:c5:ef:03:68:4d:9c:51:68:
f5:d1:9e:27:78:e7:7a:f4:4e:3a:ed:cb:84:36:7e:
9c:38:35:23:ff:6d:bc:f8:8d:b8:7f:b4:23:8d:db:
37:cb:6b:c2:fd:af:e4:f8:36:57:9c:e5:c5:65:5f:
51:b8:6d:fa:e3:eb:da:ac:10:11:f3:63:a5:ce:0d:
87:1e:ea:58:97:b2:96:6e:28:e0:92:2b:97:ef:d8:
05:41:ff:f7:43:97:b4:25:f1:4a:a5:d5:a1:c8:c6:
38:d3:de:24:ab:7c:d7:5e:11:16:09:6a:36:4b:75:
7e:aa:87:73:16:b5:59:66:90:49:0c:04:4c:d6:6f:
7f:e5:0a:5b:f3:a8:a9:f5:b1:be:9e:65:b9:f5:56:
38:da:c7:de:da:46:44:d6:4a:4d:23:f5:27:55:58:
6f:23:d7:52:47:3a:e7:d3:66:8b:fa:11:c2:da:b0:
99:4c:15:ff:a1:6d:e4:1d:5a:14:2d:94:27:11:c4:
f2:18:d9:6b:4d:db:19:51:aa:dd:76:64:9a:55:ec:
68:17:e7:23:30:4b:0a:ea:14:0c:1c:83:e1:bc:89:
12:9a:3e:77:75:ea:6d:be:54:86:1f:c1:ce:54:54:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:39:A0:D6:D8:89:EA:37:82:47:1F:4F:B1:91:88:90:93:FC:BC:2B
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS42216.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.76.0/24
62.182.32.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
49:8c:48:d7:18:e0:ef:c0:dd:d6:98:70:1b:d1:0d:7b:ff:90:
f8:82:5b:03:00:30:88:76:96:87:36:9e:e6:c0:0f:4b:14:b5:
d5:ea:c9:a1:0c:f1:e9:82:d9:f9:74:3b:eb:8b:ee:0b:71:82:
a5:73:60:7d:cd:94:78:a5:3b:b4:8e:b0:a6:6c:89:cc:67:ef:
88:80:d4:2f:68:7f:4b:f1:92:8c:ef:50:1a:05:09:a6:61:c8:
a0:5b:59:01:d8:1f:df:6d:60:57:94:ee:13:7f:3a:7a:e3:73:
52:59:c2:fa:56:3c:51:70:65:a3:00:5f:77:de:c2:cd:5f:36:
ab:e1:17:ef:84:f0:63:7b:35:e9:1e:00:07:2d:71:55:61:79:
28:30:21:5e:18:35:61:15:7c:b7:67:25:bd:11:1b:28:3c:f6:
ca:b1:4a:95:57:d8:87:a0:cd:38:25:fb:3e:67:23:d0:45:24:
99:e5:95:e8:db:02:80:53:a2:ca:d1:67:d3:7c:af:06:32:1a:
b2:f1:0e:ce:2b:7e:3c:85:dc:eb:a8:c6:7a:af:d6:c0:a5:4c:
f8:0a:f3:89:fc:58:30:d2:38:3b:22:78:08:ea:0f:0b:89:3c:
3c:70:c0:17:af:6b:f5:78:1f:a5:e7:17:4d:44:6a:48:13:17:
e6:c3:56:5a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUIk/RGpT8CAzX+dtmZFyvayEOwx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTA0MjIwNzU1MjlaFw0yNjA0MjEwODAwMjlaMDMxMTAvBgNV
BAMTKDU4MzlBMEQ2RDg4OUVBMzc4MjQ3MUY0RkIxOTE4ODkwOTNGQ0JDMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVkgPFgr8pdyeZLVLs4rPEM91
7ELF7wNoTZxRaPXRnid453r0Tjrty4Q2fpw4NSP/bbz4jbh/tCON2zfLa8L9r+T4
Nlec5cVlX1G4bfrj69qsEBHzY6XODYce6liXspZuKOCSK5fv2AVB//dDl7Ql8Uql
1aHIxjjT3iSrfNdeERYJajZLdX6qh3MWtVlmkEkMBEzWb3/lClvzqKn1sb6eZbn1
Vjjax97aRkTWSk0j9SdVWG8j11JHOufTZov6EcLasJlMFf+hbeQdWhQtlCcRxPIY
2WtN2xlRqt12ZJpV7GgX5yMwSwrqFAwcg+G8iRKaPnd16m2+VIYfwc5UVLh3AgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUWDmg1tiJ6jeCRx9PsZGIkJP8vCswHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTNDIyMTYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAAl3UwD
BAI+tiADBALUc2QwDQYJKoZIhvcNAQELBQADggEBAEmMSNcY4O/A3daYcBvRDXv/
kPiCWwMAMIh2loc2nubAD0sUtdXqyaEM8emC2fl0O+uL7gtxgqVzYH3NlHilO7SO
sKZsicxn74iA1C9of0vxkozvUBoFCaZhyKBbWQHYH99tYFeU7hN/Onrjc1JZwvpW
PFFwZaMAX3fews1fNqvhF++E8GN7NekeAActcVVheSgwIV4YNWEVfLdnJb0RGyg8
9sqxSpVX2IegzTgl+z5nI9BFJJnllejbAoBTosrRZ9N8rwYyGrLxDs4rfjyF3Ouo
xnqv1sClTPgK84n8WDDSODsieAjqDwuJPDxwwBeva/V4H6XnF01EakgTF+bDVlo=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:07:21 2025 by rpki-client